ORBS publishing delay

To: RIPE anti-spam <
>

From: Rodney Tillotson <
>

Date: Wed, 24 May 2000 08:42:10 +0100

(was: Minutes of RIPE 36 Anti-spam WG)
At 10:42 23/05/2000, Paul Mansfield wrote:
> > Evidence of spammers using ORBS information (ORBS scanning seen,
> > then relay attempts). This points to a serious leak from ORBS.
> I presume therefore that people believe that ORBS are not in fact
> holding back data for thirty days?
What we heard at the WG meeting was a report of relay attempts
following probes almost immediately.
This may indeed mean that the delay is short.
Another possibility (which neither I nor anyone else thought of at
the time) is that the victim failed to spot the first probes before
the thirty-day period, and was talking about a re-test shortly
before publishing.
Rodney.